GeIng Deeper Insights into your and Storage with Splunk

Transcription

1 Copyright 2014 Splunk Inc. GeIng Deeper Insights into your and Storage with Splunk Stela Udovicic Sr. Product Manager, Splunk Michael Donnelly Senior SE, Technologies Specialist, Splunk

2 Disclaimer During the course of this we may make forward- looking statements regarding future events or the expected performance of the company. We you that such statements reflect our current and based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward- looking statements, please review our filings with the SEC. The forward- looking statements made in the this are being made as of and date of its live If reviewed auer its live this may not contain current or accurate We do not assume any to update any forward- looking statements we may make. In any about our roadmap outlines our general product and is subject to change at without It is for purposes only, and shall not be incorporated into any contract or other commitment. Splunk undertakes no either to develop the features or described or to include any such feature or in a future release. 2

3 About Me! Stela Udovicic, Sr. Product Manager, Responsible for IT use cases including networking, storage, *nix Over 15 years of experience with variety of networking technologies! Michael Donnelly, Senior SE, Technologies Specialist Splunk administrator for 4 years, 20 years in IT 8 years virtualiza@on experience, as sys admin and developer 3

4 Agenda! Insights: Splunk App for VMware! Storage Insights: Splunk App for NetApp Data ONTAP! Integrated Insights Demo 4

5 IT Complexity VPN IP Phone INFRASTRUCTURE APPLICATIONS Finance HR PACKAGED APPLICATIONS App Svr Web Svr DB CUSTOM APPLICATIONS SaaS/PaaS IaaS VITUALIZATION SERVERS STORAGE NETWORKING

6 Plaguing IT IP Phone Finance Web Svr SaaS/PaaS HR App Svr Disconnected and outdated point VPN DB INFRASTRUCTURE APPLICATIONS Complex, silo- based technologies PACKAGED APPLICATIONS CUSTOM APPLICATIONS IaaS brute- force problem Over 80% on maintaining not VITUALIZATION SERVERS STORAGE NETWORKING

7 What it s Like in the Trenches Service Desk Database Admin Network Admin Sysadmin Virt. Admin Storage Admin Logs call. Applica@on is slow Checks database logs. Database stopped accep@ng connec@ons Stops working on deploying new services. Checks logs and performance. Network OK 7 Checks UCS logs. Looks at the OS, everything is fine, OS sees 40% disks u@liza@on Goes through VMs. Checks VMs and data stores health manually analyzes them Goes through volumes suppor@ng VMs. Iden@fies issue Escalate Escalate Escalate Escalate Escalate >12- hour outage!

8 Boost Performance by Your Environment Maximize Your VirtualizaEon Investment Capacity OpEmizaEon for exceeding ApplicaEons SLAs ProacEve Monitoring for Avoiding VirtualizaEon Risks 8

9 Major Oil and Gas Company Gets Comprehensive Visibility into IT Infrastructure Benefits: Reduced costs and MTTR Splunk App for NetApp Data ONTAP Splunk App for VMware Splunk Aps for Windows/*nix Cisco ACI AnalyEcs for Splunk ACI App Storage Admin VMware Admin OS Admin Fabric/Network Admin Admin 9

10 Insights

11 The Virtual Datacenter Challenge Too Much Complexity and Too Lille Visibility Not enough data about data alone doesn't solve problems Point offer inadequate analyses 11

12 Integrated Insights into Your VMware Environment ProacEve Monitoring Real- &me ac&onable insights into problem spots and health issues Comprehensive AnalyEcs Real- &me and historical insights into performance, security, capacity, forecas&ng, outlier detec&on and change tracking VMware vcenter Server(VC) APP APP OS OS VMware vsphere VM VM Explore Monitor Report End- to- end Visibility Scalable big data solu&on for holis&c visibility across all technology &ers Storage Network Devices Physical Layer Servers Correlate 12

13 Intelligent Across There is no other tool out there that can Ee all the different pieces together and facilitate analysis on diverse data sources. Splunk has become our primary analyecs tool. James Lord Chief Architect, Cloud Opera&ons! Characterize customer usage to trend and analyze usage palerns! Establish baselines on infrastructure and performance! Decrease costs with granular insights into and infrastructure behavior by resource Meet customer demand by to the cloud 13

14 One Splunk Many Uses Using Splunk for VMware gets us our data in one place, for many uses: capacity planning, event monitoring, performance analysis, security monitoring and more. Peter Cole Technical Lead, ITS Opera&ons 14! A defini@ve record of what happened in our environment Analyze and trend performance as well as user ac@vi@es very easily! Useful for both opera@onal monitoring, capacity usage, performance metrics and for security monitoring

15 Integrated Insights into and OS Health Network Infrastructure Splunk Environment SAN & NAS Networking Infrastructure Servers Directory 15

16 Monitoring Your Virtualiza&on Environment VMware Environment Network Infrastructure Splunk Environment vcenter Server ESXi Hosts SAN & NAS Networking Infrastructure Servers Directory 16

17 Monitoring Your Actual Virtualiza&on Environment VMware Environment Network Infrastructure Splunk Environment vcenter Server ESXi Hosts SAN & NAS Networking Infrastructure Servers Directory 17

18 Monitoring Your Full Environment VMware Environment Network Infrastructure Splunk Environment vcenter Server ESXi Hosts SAN & NAS Networking Infrastructure Servers Directory 18

19 Monitoring Your Full Environment VMware Environment Network Infrastructure Splunk Environment vcenter Server ESXi Hosts SAN & NAS Networking Infrastructure Servers Directory 19

20 Storage Insights

21 Splunk App for NetApp Data ONTAP Central ProacEve Monitoring OperaEonal AnalyEcs Cross- Eer Visibility Reduced MTTR OpEmized Capacity, Performance Fast Time to Value 21

22 Visibility ESXi Ethernet NIC Data stores (virtual) Physical storage NetApp Controller Correlate NetApp data with OS and data for simplified 22

23 App Architecture API calls: Performance metrics 60s and inventory data 10 min Data CollecEon Node (DCN) NetApp Filers Splunk App for NetApp Data ONTAP Dashboards, reports, field Log data via syslog Splunk HF/LF

24 Mentor Graphics The Splunk App for NetApp Data ONTAP delivers cluster- mode performance metrics monitoring that Mentor Graphics has not been able to achieve previously. The real value for us is all the NetApp logs, data and performance metrics the app exposes to Splunk souware. INSERT DASHBOARD Lee Melvin, Technical Architect at Mentor Graphics Key Customer Beliefs! Customizable reports and SLA metrics! Future- proof monitoring enables across different domains such as NetApp and VMware 24

25 Sealle Cancer Care Alliance Using Splunk NetApp App we gain instant visibility into what is happening in our NetApp storage. Splunk is the only we found that allows us to quickly and precisely see, analyze and correlate our data without having to be data or even Splunk experts. INSERT DASHBOARD IT Infrastructure Lead, SeaJle Cancer Care Key Customer Benefits! Significant in MTTR due to instant visibility into NetApp storage systems and with security and OS data! Quick of storage incident without being storage experts 25

26 Integrated Insights Demo: Storage and OS

27 Single Console Visibility into IT Infrastructure Reduce MTTR! Boost ApplicaEons SLAs! Reduce Costs! Maximize Your VirtualizaEon Investment OpEmized Performance and Capacity Cross- Eer Visibility 27

28 Special Offer: Try Splunk MINT Express for Free! Splunk MINT offers a fast path to mobile intelligence. How fast? Find out with a 6- month trial* Register for your free trial: hlp://mint.splunk.com/conf2014offer Download the Splunk MINT SDKs Add the Splunk MINT line of SDK code and publish** Start geing digital intelligence at your finger@ps! *Offer valid for.conf2014 ajendees and coworkers of ajendees only. **Trial allows monitoring of up to 750,000 monthly ac&ve users (MAUs). 28

29 Thank You

30 Backup slides: Donnelly

31 Splunk for VMware Architecture Physical VMware environment Network Infrastructure Splunk Environment vcenter Server Performance (API) vcenter Logs Splunk DCN ESXi logs ESXi Hosts SAN & NAS Networking Infrastructure Servers Directory 31

32 Splunk for VMware Required Physical VMware environment API: TCP 443 TCP 443 DCN TCP 8089 & 8008 Splunk Environment vcenter Server vcenter Logs: TCP 9997 TCP 9997 ESXi Hosts Syslog: TCP 1514 UDP 514 Syslog Server TCP 9997 SAN & NAS Networking 32

33 Deployment notes! All of the ports in the previous slide are the default ports; Splunk can be adapted to use alternates! If you re using search head pooling there are details covered in the guide. You must use a dedicated search head (not pooled) to act as the Data Collec@on Scheduler! During installa@on, the DCN will be configured either by SSH or remote console access; addi@onal configura@on is done via the Splunk web UI on TCP port Ensure that access by SSH/8000 or by CLI via console will be possible 33

34 Backup Slides: Stela

35 Industry Leading Plazorm for Machine Data Machine Data: Any LocaEon, Type, Volume Answer Any QuesEon On- Premises Servers Online Services Security Web Services Networks GPS Packaged Ad hoc search Monitor and alert Report and analyze Custom dashboards Developer Plaborm Private Cloud Storage Desktops Messaging Custom Public Cloud Online Shopping Cart Smartphones and Devices Telecoms Web Clickstreams RFID Call Detail Records Databases Energy Meters Plaborm Support (Apps / API / SDKs) Enterprise Scalability Universal Indexing

36 Industry Leading Plazorm for Machine Data Machine Data: Any LocaEon, Type, Volume Answer Any QuesEon On- Premises Private Cloud Public Cloud Servers Storage Online Services Web Services Security GPS Any amount, Packaged any any source Networks Desktops Schema- RFID Telecoms Online on- the- fly Shopping Cart Smartphones and Devices Web Clickstreams Call Detail Records Universal indexing Messaging Databases Energy Meters Custom Ad hoc search Monitor and alert No back- end RDBMS Report and analyze Plaborm Support (Apps / API / SDKs) Enterprise Scalability Universal Indexing Custom dashboards No need to filter data Developer Plaborm

37 Splunk Enables the Connected Datacenter CLOUD SERVICES CUSTOM APPLICATIONS PACKAGED APPLICATIONS INFRASTRUCTURE APPLICATIONS VIRTUALIZATION SERVER, STORAGE, NETWORKING Business Insights Gain insight from your machine data to make beler- informed business decisions OperaEonal Visibility Gain visibility to make beler- informed IT decisions ProacEve Monitoring Monitor infrastructure to issues, problems and alacks before they impact your customers and services Search and InvesEgaEon Find and fix problems across the using machine data 37

38 Central Monitoring! Unified insights into NetApp ONTAP filers! Increased storage visibility! Easy of anomalies 38

39 Flexible capacity planning! Customizable SLA tracking 39

40 Key For Monitoring VMware Environments Provide access to underlying machine data to quickly problem spots and troubleshoot issues in Persist data to determine performance and trends for planning, and Gain visibility across diverse infrastructures and heterogeneous technologies

41 Key Benefits Reduce MTTR Eliminate silos gain visibility into health in to storage, systems, networks and other infrastructure components Maximize ROI Improve infrastructure efficiencies and avoid over- provisioning with granular insights into resource Reduce Costs Reclaim and reuse unused resources auer they are no longer needed avoiding a virtual sprawl with detailed analysis on your virtual assets I now have built- in visibility into latencies caused by my storage and impact to the applica@on performance I can see how my workloads are using my vcpus and RAM, thus avoiding high CPU and op@mized resource u@liza@on We ve recycled inac@ve and abandoned VMs and avoided capital expenditure 41